Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/34352e3136302e3231362e302f32322d3232203d3e203631353934.roa
File:                     34352e3136302e3231362e302f32322d3232203d3e203631353934.roa (raw, json)
Hash identifier:          3EP3dEY0EkBHK0TSojynkeAX8HLSrnALnlM7cFG77c4=
Subject key identifier:   44:56:F9:0A:53:91:5B:7E:28:39:CE:2F:42:29:87:B3:F5:6C:AD:B2
Certificate issuer:       /CN=8F22D0F09007A0AB362AFC115EFAF686F131E2E3
Certificate serial:       5B66C43F4F9418B821ECC4A80B636F2F64E094A3
Authority key identifier: 8F:22:D0:F0:90:07:A0:AB:36:2A:FC:11:5E:FA:F6:86:F1:31:E2:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/34352e3136302e3231362e302f32322d3232203d3e203631353934.roa
Signing time:             Fri 07 Jun 2024 11:48:57 +0000
ROA not before:           Fri 07 Jun 2024 11:43:57 +0000
ROA not after:            Fri 06 Jun 2025 11:48:57 +0000
asID:                     61594
IP address blocks:        45.160.216.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:66:c4:3f:4f:94:18:b8:21:ec:c4:a8:0b:63:6f:2f:64:e0:94:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F22D0F09007A0AB362AFC115EFAF686F131E2E3
        Validity
            Not Before: Jun  7 11:43:57 2024 GMT
            Not After : Jun  6 11:48:57 2025 GMT
        Subject: CN=4456F90A53915B7E2839CE2F422987B3F56CADB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:ad:91:1c:0b:56:47:e9:e9:12:19:50:cc:
                    f3:1c:4b:75:a2:65:c3:42:91:7c:95:ad:24:f5:a6:
                    0a:2d:22:77:75:46:fb:a1:bd:d5:53:42:f2:f0:be:
                    3a:8a:89:b3:81:ed:20:a4:59:89:5b:a6:19:e2:eb:
                    ae:7e:34:8e:eb:4f:99:5b:49:f8:2d:9d:c4:ed:fc:
                    32:00:ff:f5:a8:46:22:fd:4c:7d:00:37:33:84:e1:
                    76:00:95:4e:8c:87:cf:dd:c8:ff:96:de:17:b6:fc:
                    6a:1a:ea:b6:22:b7:84:57:01:8d:90:cc:f1:06:d0:
                    b3:20:63:a1:5c:17:0c:b5:14:95:9b:d2:00:8a:e0:
                    12:25:1c:8b:37:cd:9b:83:44:93:e7:26:06:a1:e2:
                    44:7a:34:ad:31:f7:32:9c:fe:ec:d1:78:54:2a:03:
                    f4:e0:d4:57:06:33:7e:7b:ac:36:29:ff:b8:4e:a0:
                    05:cc:23:ba:51:b4:3c:72:65:fe:ca:ec:4b:53:0d:
                    0f:85:4f:85:11:a5:47:4c:c1:18:99:1b:34:4e:42:
                    1d:9c:fd:e2:a3:aa:85:e4:0b:e4:f8:a5:11:2b:a1:
                    65:f6:d8:7d:a6:88:29:e5:ed:e9:26:ed:cf:2c:5a:
                    ef:7c:26:76:db:86:35:58:0f:0d:35:73:7c:f5:8d:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:56:F9:0A:53:91:5B:7E:28:39:CE:2F:42:29:87:B3:F5:6C:AD:B2
            X509v3 Authority Key Identifier:
                keyid:8F:22:D0:F0:90:07:A0:AB:36:2A:FC:11:5E:FA:F6:86:F1:31:E2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/34352e3136302e3231362e302f32322d3232203d3e203631353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:74:c9:76:ea:6a:32:2d:76:a3:b4:1e:30:e3:a0:dd:2c:3d:
         a2:81:02:56:48:49:db:4e:cc:5c:9f:46:c3:bc:e5:c4:46:9b:
         c9:62:b5:ac:6b:b5:e5:d3:10:72:45:d8:ab:1c:ce:9c:0f:f2:
         71:6b:2b:5e:4f:e0:ae:9b:45:22:9b:ec:f4:83:29:d1:fb:cc:
         3f:b7:76:9e:3a:ac:5f:bc:72:23:91:b2:ed:de:72:5c:20:b0:
         9c:a6:47:3d:e5:8f:2d:56:17:11:2d:dd:c1:ae:a5:a6:4f:fa:
         73:1f:a1:61:ec:ae:1c:df:64:86:a4:e9:8e:47:6f:ed:c9:31:
         a4:3f:6a:28:96:68:30:77:91:45:8d:c7:1c:36:fc:14:a0:d1:
         53:a4:8f:36:7e:d4:4c:71:fc:0c:fc:36:3e:76:89:65:ab:65:
         5d:ae:57:e7:69:6c:40:63:88:78:a6:ad:33:5b:bf:57:cc:f1:
         ad:60:1c:88:7e:e1:a5:20:70:d1:f1:ea:77:05:ac:07:85:f4:
         35:bf:11:db:52:86:26:fb:63:2f:69:3c:46:4a:47:5a:8b:94:
         0c:40:35:c1:20:f7:73:38:46:db:cf:51:0d:7a:82:20:45:fb:
         58:e9:c8:c8:7a:52:d6:93:0b:2e:4c:68:6f:d9:24:59:70:c4:
         f9:53:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 01:44:02 2024 by rpki-client on console-ams.rpki-client.org